How do I recognize and report suspected phishing attempts?

What is phishing?

Phishing is a type of online scam where attackers impersonate trusted sources—like coworkers, banks, or well-known companies—to trick you into sharing sensitive information.

How does it work?

Phishing messages may come through:

📧 Emails
📱 Text messages
📞 Phone calls
💬 Other communication channels

What are they after?

Attackers often try to steal:

🔐 Passwords
💳 Credit card numbers
🧾 Account details

Why it matters

Phishing doesn’t target your device—it targets you. These scams rely on human trust and behavior, not technical vulnerabilities.

What do I do if I suspect a phishing attempt?

If you suspect you've received an email phishing attempt, do not respond to the email. Instead, forward the email as an attachment to infosec@scranton.edu, then delete the message. Note that forwarding as an attachment is an option in NEW MS Outlook, MS Outlook Classic and Outlook on the Web.


Tips to protect yourself

  • Think before you click: Be cautious with unexpected links or attachments.
  • Verify the source: If something feels off, confirm with the sender through a trusted channel.
  • Don’t share sensitive info: Never give out personal or financial details unless you're sure who you're talking to.